CVE-2018-12255

An XSS issue was discovered in InvoicePlane 1.5.10 via the "Quote PDF Password(Optional)" field.

• CWE-79

• https://development.invoiceplane.com/browse/IP-707Broken Link
• https://github.com/V33RU/Invoice-Plane-XSSExploit, Third Party Advisory
• https://development.invoiceplane.com/browse/IP-707Broken Link
• https://github.com/V33RU/Invoice-Plane-XSSExploit, Third Party Advisory

Published

Jul 3, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-12247An issue was discovered in mruby 1.4.1. There is a NULL poin…
• CVE-2018-12248An issue was discovered in mruby 1.4.1. There is a heap-base…
• CVE-2018-12249An issue was discovered in mruby 1.4.1. There is a NULL poin…7.5
• CVE-2018-1225Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-12250An issue was discovered in Elite CMS Pro 2.01. In /admin/add…
• CVE-2018-12254router.php in the Harmis Ek rishta (aka ek-rishta) 2.10 comp…
• CVE-2018-12256admin/vqmods.app/vqmods.inc.php in LiteCart before 2.1.3 all…
• CVE-2018-12257An issue was discovered on Momentum Axel 720P 5.1.8 devices.…
• CVE-2018-12258An issue was discovered on Momentum Axel 720P 5.1.8 devices.…
• CVE-2018-12259An issue was discovered on Momentum Axel 720P 5.1.8 devices.…
• CVE-2018-1226Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-12260An issue was discovered on Momentum Axel 720P 5.1.8 devices.…